$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa File: b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa (raw, json) Hash identifier: xoY+qZTcvh4isj3SzE8TPvYokPLIMjh6Hi5BQXV5RMY= Subject key identifier: A4:B7:8A:69:70:F5:F8:6F:C4:EA:2B:EA:1D:96:BD:3C:37:39:64:5F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584973DEDD207FC224EFAC287180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 396356 IP address blocks: 23.27.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dd:20:7f:c2:24:ef:ac:28:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=c1a3fb9f-0752-4e09-997a-a0a549f4f2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:96:2d:f1:97:8c:92:e4:d7:de:e9:34:94: cf:12:23:d0:95:cd:de:59:c7:8e:be:d8:44:5a:fb: db:38:ef:1a:fd:5e:20:22:05:87:f0:f5:ad:c1:f0: ae:26:73:87:0e:54:33:e2:ad:14:44:c7:ac:11:4f: 71:9a:0f:e2:7c:85:d6:47:93:a1:85:16:70:20:aa: b9:8e:11:93:44:06:f4:19:5e:87:5a:4f:b2:d9:78: bf:97:ca:98:30:b8:82:b8:b5:83:a8:12:00:ee:56: 2d:14:f0:f8:9a:16:bb:e1:92:54:ba:3b:73:40:61: b1:b3:f7:57:ae:68:d6:c4:df:a1:9f:02:9d:db:fb: 19:ff:74:da:ba:8b:6d:04:89:58:aa:fc:de:19:71: bb:39:e2:a3:74:47:8b:b0:f1:96:f2:c5:07:4b:a6: 33:ff:9a:96:b9:61:f8:89:dd:ea:c3:50:71:e8:05: ed:1d:55:dd:1a:2f:f6:c2:18:d9:85:18:be:16:53: 79:29:44:97:67:bc:86:bf:d6:77:35:43:f2:3d:bd: b3:91:f0:5f:23:a8:0f:21:1f:e0:c1:f7:f4:c9:33: 69:6c:4a:f1:af:4b:15:2b:ca:e5:d3:7f:dc:9d:16: 4a:d0:01:60:80:56:91:10:77:36:b6:33:dc:2a:08: 75:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B7:8A:69:70:F5:F8:6F:C4:EA:2B:EA:1D:96:BD:3C:37:39:64:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:01:db:c8:79:39:40:d9:d7:e4:a0:8c:b4:a8:44:57:a2:5e: 36:25:31:6f:c5:02:5e:17:29:3f:b2:17:6c:f2:bf:be:fe:6e: 79:13:61:2a:a7:bc:8e:6f:5a:88:47:4a:96:35:d8:ea:24:92: ab:e1:05:a9:44:1a:ab:1a:ef:50:38:95:b1:59:69:83:eb:31: 20:b7:d7:46:fe:f8:5b:dd:b8:2d:1f:2c:90:80:2c:e5:85:a1: 90:d8:60:3c:e5:ab:47:9d:2f:38:5b:8a:4a:81:81:d5:cb:8c: 4e:2d:48:82:61:76:bc:84:d0:cb:90:5e:0b:4a:1a:90:bb:ba: 93:2e:9c:e1:79:a6:da:a8:a9:0e:38:10:e6:c7:1d:73:30:49: bb:ac:a9:7f:4b:91:d1:99:b3:d0:ad:13:47:07:ed:e0:b5:e8: 78:57:98:05:8b:e0:a6:c0:2e:2e:ae:e9:ab:d0:25:bc:f6:8e: 09:43:20:cf:75:a1:d3:8d:9a:d6:41:06:35:39:12:35:ae:ec: 8c:16:f1:b2:13:9a:32:c2:fe:a1:7d:a3:0b:ae:5d:e4:51:d3: d7:a4:cc:d7:8c:5e:30:1b:91:da:44:52:8b:ef:5e:19:3e:4a: bd:84:b7:17:75:19:4c:47:2e:99:cd:6a:d0:66:58:8c:f1:e1: 54:f3:4d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3t0gf8Ik76wocYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YzFhM2ZiOWYtMDc1Mi00ZTA5LTk5N2EtYTBhNTQ5ZjRmMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2KWLfGXjJLk197pNJTPEiPQlc3eWceOvthE WvvbOO8a/V4gIgWH8PWtwfCuJnOHDlQz4q0URMesEU9xmg/ifIXWR5OhhRZwIKq5 jhGTRAb0GV6HWk+y2Xi/l8qYMLiCuLWDqBIA7lYtFPD4mha74ZJUujtzQGGxs/dX rmjWxN+hnwKd2/sZ/3TauottBIlYqvzeGXG7OeKjdEeLsPGW8sUHS6Yz/5qWuWH4 id3qw1Bx6AXtHVXdGi/2whjZhRi+FlN5KUSXZ7yGv9Z3NUPyPb2zkfBfI6gPIR/g wff0yTNpbErxr0sVK8rl03/cnRZK0AFggFaREHc2tjPcKgh14wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS3imlw9fhvxOor6h2WvTw3OWRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjg3OGM2YzItMjgxZS0z ODUxLThmNzktNGZjNGIyZjVkMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxveMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8B28h5OUDZ1+SgjLSoRFeiXjYlMW/FAl4XKT+yF2zyv77+bnkTYSqn vI5vWohHSpY12OokkqvhBalEGqsa71A4lbFZaYPrMSC310b++FvduC0fLJCALOWF oZDYYDzlq0edLzhbikqBgdXLjE4tSIJhdryE0MuQXgtKGpC7upMunOF5ptqoqQ44 EObHHXMwSbusqX9LkdGZs9CtE0cH7eC16HhXmAWL4KbALi6u6avQJbz2jglDIM91 odONmtZBBjU5EjWu7IwW8bITmjLC/qF9owuuXeRR09ekzNeMXjAbkdpEUovvXhk+ Sr2Etxd1GUxHLpnNatBmWIzx4VTzTSc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:14 2025 by rpki-client